Someone bought something on my account without my permission, how do i get my money back

[Thunder103093]

I just went on my email now & i got an email saying i spent over $50 of my steam wallet on buying something from CS/CO, that isn't me though, i have no idea how this person did it because i never gave my account info out to anyone & i didn't buy anything cs/co related, i just changed my passwords & stuff, but how can i resolved this so i can get my money back?

[Wolf Knight]

your account is compromised
DO NOT TRADE
If you have access to the account

Steps to take NOW:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)


Please review how you are logging into Steam, you somehow gave them your log in information. This could of been due to the computer being compromised and redirecting to a fake login, or you using a 3rd party site to login to steam.

[John]

I just had the same thing happen today.

And now "Steps to take NOW:" = So it's MY fault?

A logical solution is an option to "Opt out of the Community Market."

It's MY money from MY debit card. So what gives?

[Cathulhu]

You leaked your account credentials. You let someone into your account.
So yes, it is your fault.

[Supafly]

You've likely used a dodgy phishing website and GAVE it your login details and got your account hijacked. Do everything in post #1 to secure your account and STOP using dodgy phishing websites...

[Thunder103093]

Originally posted by Supafly:

You've likely used a dodgy phishing website and GAVE it your login details and got your account hijacked. Do everything in post #1 to secure your account and STOP using dodgy phishing websites...

no idea who your talking to, but no i didn't use any phishing websites & i had steam guard, it just didn't work

[Muppet among Puppets]

Originally posted by Thunder103093:

& i had steam guard, it just didn't work

It just means, someone needed not only the account name and password, but also a code.
As they got in, they had these 3 details. Not 2.

[Supafly]

Originally posted by Thunder103093:

Originally posted by Supafly:

You've likely used a dodgy phishing website and GAVE it your login details and got your account hijacked. Do everything in post #1 to secure your account and STOP using dodgy phishing websites...

no idea who your talking to, but no i didn't use any phishing websites & i had steam guard, it just didn't work

Steam guard is nothing but an extra key. If someone gives out their username, password and Steam Guard code that person will have access to the account. It's no different to giving you house keys to a stranger and thinking your home is secure because you have a lock on the door.

1 year later I would have expected the OP/YOU to have learnt this.....Only just realised post #2 necro'd the thread.

[Thunder103093]

Originally posted by Supafly:

Originally posted by Thunder103093:

no idea who your talking to, but no i didn't use any phishing websites & i had steam guard, it just didn't work

Steam guard is nothing but an extra key. If someone gives out their username, password and Steam Guard code that person will have access to the account. It's no different to giving you house keys to a stranger and thinking your home is secure because you have a lock on the door.

1 year later I would have expected the OP/YOU to have learnt this.....Only just realised post #2 necro'd the thread.

i didn't give my info out though, thats the problem, it just happened & they took my money

[Crazy Tiger]

Originally posted by Thunder103093:

Originally posted by Supafly:

Steam guard is nothing but an extra key. If someone gives out their username, password and Steam Guard code that person will have access to the account. It's no different to giving you house keys to a stranger and thinking your home is secure because you have a lock on the door.

1 year later I would have expected the OP/YOU to have learnt this.....Only just realised post #2 necro'd the thread.

i didn't give my info out though, thats the problem, it just happened & they took my money

Consider that Steam accounts can't be brute forced and that hijackings occur via phishing or malware. It's either of those two.

Also keep in mind that good phishing pages mean you never realised you gave away your login credentials.

Staying in denial will only result in it happening again in the future.

Originally posted by John:

I just had the same thing happen today.

And now "Steps to take NOW:" = So it's MY fault?

A logical solution is an option to "Opt out of the Community Market."

It's MY money from MY debit card. So what gives?

Your fault for getting the account compromised? No, not necessarily. Your responsibility for keeping the account (in)secure? Yes, most definitely.

[Supafly]

Originally posted by Thunder103093:

Originally posted by Supafly:

Steam guard is nothing but an extra key. If someone gives out their username, password and Steam Guard code that person will have access to the account. It's no different to giving you house keys to a stranger and thinking your home is secure because you have a lock on the door.

1 year later I would have expected the OP/YOU to have learnt this.....Only just realised post #2 necro'd the thread.

i didn't give my info out though, thats the problem, it just happened & they took my money

1 way or another you LEAKED the information. You've had a year to figure that out. If you still live in Denial land it's only a matter of time before it happens again.

[Thunder103093]

Originally posted by Crazy Tiger:

Originally posted by Thunder103093:

i didn't give my info out though, thats the problem, it just happened & they took my money

Consider that Steam accounts can't be brute forced and that hijackings occur via phishing or malware. It's either of those two.

Also keep in mind that good phishing pages mean you never realised you gave away your login credentials.

Staying in denial will only result in it happening again in the future.

Originally posted by John:

I just had the same thing happen today.

And now "Steps to take NOW:" = So it's MY fault?

A logical solution is an option to "Opt out of the Community Market."

It's MY money from MY debit card. So what gives?

Your fault for getting the account compromised? No, not necessarily. Your responsibility for keeping the account (in)secure? Yes, most definitely.

No, it wasn't either, it did just happen & that is final & im done arguing about something from a year ago unless its about getting my stolen money back.

[Thunder103093]

Originally posted by Supafly:

Originally posted by Thunder103093:

i didn't give my info out though, thats the problem, it just happened & they took my money

1 way or another you LEAKED the information. You've had a year to figure that out. If you still live in Denial land it's only a matter of time before it happens again.

no i did not & that is final

[Supafly]

Originally posted by Thunder103093:

Originally posted by Supafly:

1 way or another you LEAKED the information. You've had a year to figure that out. If you still live in Denial land it's only a matter of time before it happens again.

no i did not & that is final

Yes you did

Whether it be malware, using a phishing (website not always so obvious) or allowed someone to use your unlocked phone YOU are the source of the Leak. Deny that all you what but YOU are why it happened and That's a FINAL FACT!

[Thunder103093]

Originally posted by Supafly:

Originally posted by Thunder103093:

no i did not & that is final

Yes you did

Whether it be malware, using a phishing (website not always so obvious) or allowed someone to use your unlocked phone YOU are the source of the Leak. Deny that all you what but YOU are why it happened and That's a FINAL FACT!

nope, i didnt leak any of my info on anything & my account was hacked on its own. that is the reality, you are incorrect & im done dealing with you

[Crazy Tiger]

Ah yes, wishful thinking about an impossible scenario since that's better than to acknowledge one did an oopsie.

Well, at least you know where to find the information you will need in the future to secure the account again when it happens again. Good luck, traveller.